Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/31da6a2c-02da-4b81-8679-392a5d80e876.roa
File: 31da6a2c-02da-4b81-8679-392a5d80e876.roa (raw, json)
Hash identifier: +4I+G3Jm0NgjKKFbjl5LeIOHhQbvAKo4/KmUSZkUFho=
Subject key identifier: 7E:CD:8D:B7:D8:11:40:3A:46:EE:7C:A3:EC:48:B9:B7:8E:9B:BD:C1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2CFD89B1B7788FF1855E4F1BAD1CB170756733A7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/31da6a2c-02da-4b81-8679-392a5d80e876.roa
Signing time: Tue 29 Apr 2025 23:33:20 +0000
ROA not before: Tue 29 Apr 2025 23:33:20 +0000
ROA not after: Tue 03 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 23:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:fd:89:b1:b7:78:8f:f1:85:5e:4f:1b:ad:1c:b1:70:75:67:33:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 29 23:33:20 2025 GMT
Not After : Jun 3 23:59:59 2025 GMT
Subject: serialNumber=9ad8b2564f8c0a4153b4560d8d29404f9a91611a06b32075d9fc578e22aadfca, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:f8:b5:0c:1f:5d:8f:e8:c9:4b:85:e3:2d:
12:87:20:57:01:ad:3c:49:c6:16:c2:61:84:45:1c:
d1:fb:b1:9a:f9:24:63:30:ae:04:1d:96:80:df:03:
c8:0c:03:87:df:d9:30:2a:dd:64:ef:89:88:ed:b1:
19:5b:93:25:ab:e5:08:47:0b:2a:9e:b6:b2:e0:bd:
fa:9f:2d:30:13:92:af:79:53:8c:0c:77:f3:27:e4:
cd:13:94:2c:ea:fe:67:b4:a1:95:b3:f5:23:72:8f:
2f:7f:da:aa:4e:05:e1:80:d8:38:59:c3:0c:2f:c5:
33:32:e0:1f:d5:7e:ab:9f:1d:6b:bf:6c:a8:79:f3:
20:1d:fe:cb:82:a3:d0:b8:19:fc:ad:f9:dc:a0:42:
ab:14:97:3f:8d:01:2c:3c:8d:6a:78:97:f2:f8:14:
b0:2c:9f:e2:24:f4:7d:3e:0e:06:98:15:af:bc:1b:
c1:fd:0f:ea:05:ea:62:d7:9a:20:fb:7d:81:65:55:
90:b0:e0:10:4a:1a:5f:33:b9:fa:cd:35:0d:ac:23:
83:dc:d8:d6:c3:db:f8:f5:3e:c4:c4:6d:93:0c:52:
a5:eb:96:53:29:55:ce:7d:5f:13:16:89:b5:9f:dc:
34:c1:41:68:b0:cb:e1:6d:11:4a:73:15:b0:24:e7:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CD:8D:B7:D8:11:40:3A:46:EE:7C:A3:EC:48:B9:B7:8E:9B:BD:C1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/31da6a2c-02da-4b81-8679-392a5d80e876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
72:49:b3:2a:c8:9f:1a:2c:83:c5:8e:2e:20:75:c2:41:23:c3:
51:38:ff:3f:79:b7:ed:1d:a8:1a:a7:77:37:02:92:da:5c:e1:
04:55:0a:c1:0c:17:f6:fa:e8:2f:7d:31:18:f8:1b:e1:ac:fc:
6d:5c:45:0b:b3:37:09:52:a6:c9:9d:ec:fc:cc:65:4b:7a:ca:
28:1e:57:8f:20:87:f8:92:bf:bf:3f:5f:ee:5d:9e:ad:90:f0:
58:13:12:bc:c5:35:26:7d:32:26:5b:4d:a6:10:71:bc:28:26:
bc:97:33:2a:56:4f:6a:af:65:82:34:f3:e7:06:b9:5a:ef:56:
7b:ab:88:e0:4d:ff:9d:36:a1:63:b8:0b:cd:34:73:1c:d6:cb:
0b:b6:ab:36:88:ec:7f:67:3b:58:15:00:33:40:4d:c5:fc:ad:
76:b3:9d:0c:48:24:5e:d2:3f:1e:70:4c:21:a1:d8:3f:02:00:
21:9d:53:73:81:49:95:13:38:cf:bc:bb:e5:bd:30:63:60:04:
97:6b:5f:a1:a5:8c:24:1d:ce:fe:e3:ba:2c:82:c4:d7:2b:52:
fa:ca:43:0c:c1:92:8d:3c:09:0a:16:81:d9:4a:47:c1:92:18:
3f:44:da:c3:00:b3:ed:4a:09:04:af:c3:29:95:22:d0:c0:e1:
c8:b6:83:e8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULP2Jsbd4j/GFXk8brRyxcHVnM6cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDI5MjMzMzIwWhcNMjUwNjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YWQ4YjI1NjRmOGMwYTQxNTNiNDU2MGQ4ZDI5NDA0Zjlh
OTE2MTFhMDZiMzIwNzVkOWZjNTc4ZTIyYWFkZmNhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFmPi1DB9dj+jJS4XjLRKHIFcBrTxJxhbCYYRFHNH7sZr5
JGMwrgQdloDfA8gMA4ff2TAq3WTviYjtsRlbkyWr5QhHCyqetrLgvfqfLTATkq95
U4wMd/Mn5M0TlCzq/me0oZWz9SNyjy9/2qpOBeGA2DhZwwwvxTMy4B/VfqufHWu/
bKh58yAd/suCo9C4Gfyt+dygQqsUlz+NASw8jWp4l/L4FLAsn+Ik9H0+DgaYFa+8
G8H9D+oF6mLXmiD7fYFlVZCw4BBKGl8zufrNNQ2sI4Pc2NbD2/j1PsTEbZMMUqXr
llMpVc59XxMWibWf3DTBQWiwy+FtEUpzFbAk56h1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfs2Nt9gRQDpG7nyj7Ei5t46bvcEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzMxZGE2YTJjLTAyZGEtNGI4MS04Njc5LTM5MmE1ZDgwZTg3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHJJsyrInxosg8WOLiB1wkEjw1E4
/z95t+0dqBqndzcCktpc4QRVCsEMF/b66C99MRj4G+Gs/G1cRQuzNwlSpsmd7PzM
ZUt6yigeV48gh/iSv78/X+5dnq2Q8FgTErzFNSZ9MiZbTaYQcbwoJryXMypWT2qv
ZYI08+cGuVrvVnuriOBN/502oWO4C800cxzWywu2qzaI7H9nO1gVADNATcX8rXaz
nQxIJF7SPx5wTCGh2D8CACGdU3OBSZUTOM+8u+W9MGNgBJdrX6GljCQdzv7juiyC
xNcrUvrKQwzBko08CQoWgdlKR8GSGD9E2sMAs+1KCQSvwymVItDA4ci2g+g=
-----END CERTIFICATE-----
Generated at Tue May 6 08:08:45 2025 by rpki-client